ntopng

Visit site Alternatives

Score7.2

Rank#9 of 55

PriceFree

Free planYes

Runs onAPI, Linux, macOS, Self-hosted, Web, Windows

Summary

ntopng is a network traffic probe that gathers information from traffic mirrors, NetFlow exporters, SNMP devices, firewall logs, and intrusion detection systems. Its encrypted web interface supports real-time and historical traffic exploration. Protocol detection powered by nDPI identifies more than 450 Layer-7 application protocols, while metrics include application latency, round-trip time, throughput, TCP retransmissions, packet loss, and VoIP jitter and MOS. The software captures packets using libpcap or PF_RING and collects flows from nProbe, NetFlow, and sFlow exporters. It includes an HTTP-based REST API and Lua scripting, and its listed platforms include Linux, FreeBSD, Windows, macOS, RaspbianOS, pfSense, and OPNsense. The Community edition is free and suggests a maximum of 256 live local hosts, 128K live flows, and eight monitored interfaces. Paid options include perpetual licenses with one year of maintenance; Pro is 299.00 EUR per once. LDAP and OpenID Connect login, multiple-interface aggregation, and certain alert integrations are assigned to Pro and higher editions.

Who it is for

ntopng suits people who need traffic visibility across network sources and want real-time or historical exploration. The free Community edition is described for home and network practitioners with smaller networks.

What is good

Detects more than 450 Layer-7 protocols.
Shows latency, throughput, retransmission, packet-loss, and VoIP metrics.
Supports packet capture and flow collection from multiple sources.
Includes an HTTP-based REST API and Lua scripting.
Free Community edition is available.

What to know first

Community edition suggests a maximum of 256 live local hosts.
Community edition suggests a maximum of 128K live flows.
Community edition supports at most eight monitored interfaces.
Pro costs 299.00 EUR per once.

Verdict

ntopng offers broad traffic collection, protocol identification, and performance metrics, with a free edition for smaller networks. Readers needing more interfaces or paid-edition features should note the edition limits and the listed Pro license cost.

ntopng plans and pricing

All plans

Community (Open Source) Free Designed for home and network practitioners · Network size: Small · Suggested maximum 256 live local hosts · Suggested maximum 128K live flows · Maximum 8 monitored interfaces ntop.org · 3 Oct 2026

Pro €299 once Perpetual license; includes one year maintenance Designed for offices and small enterprises · Network size: Small/Medium · Suggested maximum 256 live local hosts · Suggested maximum 1M live flows · Maximum 8 monitored interfaces ntop.org · 3 Oct 2026

Enterprise M €699.95 once Perpetual license; includes one year maintenance Enterprise feature set · Suggested maximum 1K live local hosts · Suggested maximum 4M live flows · Maximum 16 monitored interfaces shop.ntop.org · 3 Oct 2026

Enterprise L €899.95 once Perpetual license; includes one year maintenance Enterprise feature set · Suggested maximum 4K live local hosts · Suggested maximum 8M live flows · Maximum 32 monitored interfaces shop.ntop.org · 3 Oct 2026

Enterprise XL €1499.95 once Perpetual license; includes one year maintenance Enterprise feature set · Suggested maximum 32K live local hosts · Suggested maximum 16M live flows · Maximum 64 monitored interfaces shop.ntop.org · 3 Oct 2026

Compared on network monitoring

Free plan: Yesntop.org

Facts

Product: ntopng is a network traffic probe for network visibility that gathers traffic information from traffic mirrors, NetFlow exporters, SNMP devices, firewall logs, and intrusion detection systems.ntop.org · 3 Oct 2026
Traffic analysis: It provides realtime and historical traffic exploration through an encrypted web user interface.ntop.org · 3 Oct 2026
Protocol detection: Its nDPI-powered protocol detection supports more than 450 Layer-7 application protocols.ntop.org · 3 Oct 2026
Performance metrics: Features include application latency, round-trip time, throughput, TCP retransmission and packet-loss metrics, and VoIP jitter and MOS metrics.ntop.org · 3 Oct 2026
Packet and flow sources: ntopng captures packets using libpcap or PF_RING and collects flows from nProbe, NetFlow, and sFlow exporters.ntop.org · 3 Oct 2026
Integrations: The product page lists export to Elasticsearch and big-data systems, while its version comparison lists alert integrations with Elasticsearch, Microsoft Teams, and Fail2Ban for paid editions.ntop.org · 3 Oct 2026
API: The technical specifications list an HTTP-based RESTful API and Lua scriptability.ntop.org · 3 Oct 2026
Deployment platforms: The product specifications list Linux, FreeBSD, Windows x64, macOS, and RaspbianOS; the product page also names pfSense and OPNsense among supported Unix platforms.ntop.org · 3 Oct 2026
Paid edition features: The version comparison assigns LDAP and OpenID Connect login, multiple-interface aggregation, and sending alerts to Elasticsearch, Microsoft Teams, or Fail2Ban to Pro and higher editions.ntop.org · 3 Oct 2026
Security: ntop says its packages are digitally signed with a PGP key and that users can verify package integrity with it.ntop.org · 3 Oct 2026
Security reports: The security page says reports sent to [email protected] will receive a non-automated acknowledgment within three working days.ntop.org · 3 Oct 2026
Support: ntop offers paid consultancy, commercial-grade support by phone, email, or on-site, professional training, and customization; community support is described as best-efforts.ntop.org · 3 Oct 2026
License terms: The shop says software licenses are perpetual and include installation support, one year of maintenance, updates, and support for the duration of maintenance.shop.ntop.org · 3 Oct 2026
Maker history: ntop says its open-source project began in 1998 to create a web-based traffic monitoring platform.ntop.org · 3 Oct 2026